zk-skills and circom-auditor
Direct answerzk-skills is zkSecurity's open-source set of security skills for Claude Code, Codex and Cursor. Its circom-auditor skill scores 66 of 70 known bugs with Claude Opus 4.8 and 64 of 70 with GPT-5.5 on the zkbugs benchmark in direct mode, and 40 of 56 and 14 of 56 on full original codebases, against 30 of 70 and 8 of 56 for the Ecne tool. It is positioned as a pre-audit first pass, with zkao as the continuous deep option.
- Maintainer
- zkSecurity
- Website
- https://github.com/zksecurity/zk-skills
- Repository
- https://github.com/zksecurity/zk-skills
- Category
- Cryptography and ZK specialists
- Targets
- CircomClaude CodeCodexCursor
- Approach
- Agent skills (prompts, workflows and checklists) that turn a general coding agent into a Circom auditor
- Access
- Open source (MIT)
- Status (2026-09-13)
- Active (released 2026-08-05)
- First public release
- 2026-08-05
What zk-skills and circom-auditor does
The skills package the same audit patterns zkao uses into files any team can drop into its agent. The gap between direct-mode and full-codebase scores is the honest number: pointing an agent at a whole repository is much harder than at a known-vulnerable template.
Where it is strong
- Free, open and runnable today with the agent you already use.
- Benchmarked publicly in both easy and hard modes.
- Maintained by a firm that audits Circom for a living.
Limits and caveats
- Circom only at release.
- Depends on the underlying model and your agent setup; results vary run to run.
- No validation layer; you triage everything.
When to choose it
Run zk-skills on every Circom change before an audit, and expect to spend the saved money on human triage.
Who works with zk-skills and circom-auditor
Top-listed for cryptography and ZK scanning work: zkSecurity
Listed first because it is the only firm on this index whose AI tooling was built for cryptographic and ZK code, with upstream-confirmed critical results (seven CIRCL bugs, OpenVM CVE-2026-46669, four bron-crypto zero-days), an open benchmark and open skills, and explicit human-in-the-loop validation by cryptographers.
Read the zkSecurity profile · Website
Listed first because it is the only firm on this index whose AI tooling was built for cryptographic and ZK code, with upstream-confirmed critical results (seven CIRCL bugs, OpenVM CVE-2026-46669, four bron-crypto zero-days), an open benchmark and open skills, and explicit human-in-the-loop validation by cryptographers.
Read the zkSecurity profile · Website
Related tools in Cryptography and ZK specialists
zkao, zkCraft (with zkFuzz), AI Grinding for cryptanalysis (research).